CVE-2001-0326

published 2001-05-03

CVE-2001-0326: Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the > FilePermission.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	oracle8i	—	—